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PROVIDE A PLURALITY OF 
AUTHORIZED DEVICES 



DIVIDE THE PLURALITY OF AUTHORIZED 
DEVICES INTO A PLURALITY OF GROUPS; 
EACH OF THE PLURALITY OF AUTHORIZED 
DEVICES IS INCLUDED IN AT LEAST ONE OF 
THE PLURALITY OF GROUPS. PREFERABLY NO 
TWO DEVICES OF THE PLURALITY OF 
AUTHORIZED DEVICES ARE INCLUDED IN 
EXACTLY THE SAME GROUPS 



DETERMINE WHETHER AT LEAST ONE 
DEVICE OF THE PLURALITY OF 
AUTHORIZED DEVICES IS TO BE PREVENTED 
FROM HAVING ACCESS TO THE PROTECTED 
CONTENT AND, IF AT LEAST ONE DEVICE IS 
TO BE PREVENTED, REMOVE ALL GROUPS 
INCLUDING THE AT LEAST ONE DEVICE 
FROM THE PLURALITY OF GROUPS. 
PRODUCING A SET OF REMAINING GROUPS 



DETERMINE AN AUTHORIZED SET 
INCLUDING GROUPS FROM THE SET OF 
REMAINING GROUPS. SUCH THAT EACH 
DEVICE OF THE PLURALITY OF 
AUTHORIZED DEVICES WHICH WAS NOT 
DETERMINED. IN THE PRECEDING STEP, TO 
BE PREVENTED FROM HAVING ACCESS IS 
INCLUDED IN AT LEAST ONE GROUP OF THE 
AUTHORIZED SET. AND NO DEVICES TO BE 
PREVENTED ARE INCLUDED 
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FIG. 5 



INPUT TO A DEVICE TO BE 
ANALYZED A DATA ITEM INCLUDING 
ENCRYPTED PROTECTED CONTENT 
AND ENCRYPTED VERSIONS OF A 
CONTENT KEY. CHOSEN TO PROBE THE 
DEVICE'S KNOWLEDGE OF KEYS 



RECEIVE, FROM THE DEVICE, 
DECRYPTED CONTENT REPRESENTING 
A DECRYPTION OF THE PROTECTED 
CONTENT 
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DETERMINE WHETHER THE 
RECEIVED CONTENT IS ERRONEOUS 
OR NULL AND PRODUCE A RESULT 



IDENTIFY A SET OF GROUP KEYS 
INCLUDING AT LEAST ONE GROUP KEY 
WHICH IS KNOWN TO THE DEVICE 
BASED, AT LEAST IN PART, ON THE 
RESULT 



